ROBOT PROTECTED PHYSICAL-OPERATION AUTHORIZATION LIFECYCLE

A robot maintains protected physical-operation
authorization separately from an artificial intelligence system
that generates a candidate robot action. The protected
authorization may specify a robot-state value or epoch,
authorized actuator scope, physical execution envelope, validity
information, and execution-use state. Hardware enforcement

positioned in an actuator execution path permits actuator-
directed operations only while applicable protected

authorization remains valid. As physical execution proceeds, the
authorization may be consumed, monotonically advanced,
attenuated, suspended, revoked, or invalidated. A change in
protected robot state may advance a robot-state epoch such that
authorization associated with an earlier physical state cannot
be replayed after the robot has physically changed. The

architecture may use a Physical-IOMMU or physical-action memory-
protection unit, protected capability registers, a Physical-
Action instruction-set architecture, protected actuator queues,

or endpoint-local enforcement, and preferably prevents an AI-
controlled alternate path from bypassing the protected actuator-
privilege mechanism.